Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
File: BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft (raw, json)
Hash identifier: 0eUAxoi1ARLwSfVqdl9XfzNHXGzMcH9C5NH0SiDF7UU=
Subject key identifier: AC:7E:4A:45:CF:87:CC:8E:FE:6B:0B:EB:88:2F:2F:A0:6D:30:7F:21
Authority key identifier: 04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E
Certificate issuer: /CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e
Certificate serial: 019A73DD062ED62C1F7836C69BB707BA3FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
Manifest number: 09F1
Signing time: Tue 11 Nov 2025 17:00:56 +0000
Manifest this update: Tue 11 Nov 2025 17:00:56 +0000
Manifest next update: Wed 12 Nov 2025 17:00:56 +0000
Files and hashes: 1: BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl (hash: 7oz/nNX5xYNFUvRJyqD9JR7PDrA7EjnqkEkDatdvljg=)
2: jV-3tArc8dsjcZ6kDNPRZe17c7E.roa (hash: N7hoaH3KyqZMDXhGvm+f+pqXc8cqz/H0JZUoSjuldtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:dd:06:2e:d6:2c:1f:78:36:c6:9b:b7:07:ba:3f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e
Validity
Not Before: Nov 11 17:00:56 2025 GMT
Not After : Nov 12 17:00:56 2025 GMT
Subject: CN=ac7e4a45cf87cc8efe6b0beb882f2fa06d307f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:5b:a2:49:08:4f:9b:98:a8:31:14:8a:53:
9d:1f:1f:38:05:6c:42:1c:5f:57:43:89:33:1c:2b:
a0:f5:6b:e2:0b:e5:cb:26:a0:4e:1f:37:11:a5:ea:
39:e1:8a:99:5f:9d:f9:e8:ba:e8:f0:96:c1:08:de:
2d:b8:f9:6e:21:58:3e:90:c9:61:6d:e9:bf:3d:71:
f0:b7:ae:48:ac:3e:83:85:a8:44:83:74:76:9e:3d:
75:c4:40:ae:eb:7c:bc:ca:c2:3d:8c:03:1d:32:04:
f9:8e:16:df:fe:67:6a:c6:2c:23:84:f5:13:6c:ad:
83:f5:f2:e0:99:29:58:57:fd:f6:f9:a9:ee:5d:7d:
51:87:68:96:d8:63:6c:54:77:20:67:ec:48:bd:3e:
ce:67:76:e2:fe:5b:8b:a0:9d:30:cb:7d:85:df:e2:
6a:5c:0d:c5:fa:d2:25:ff:c2:4f:dd:c7:43:d7:37:
a7:a3:9e:0f:28:c6:30:36:ec:57:5d:f6:48:8b:35:
1e:2d:4f:fc:60:87:9d:79:e9:03:6a:29:cb:a1:ce:
de:3e:00:07:e9:ef:e9:a4:f4:cb:8e:5d:3c:62:6a:
08:a9:3f:f4:40:f0:fa:fc:78:91:1d:3e:43:c6:2d:
fa:68:83:86:6a:3f:38:19:c9:9b:6f:00:31:70:0a:
96:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7E:4A:45:CF:87:CC:8E:FE:6B:0B:EB:88:2F:2F:A0:6D:30:7F:21
X509v3 Authority Key Identifier:
keyid:04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:91:fa:e2:58:0a:20:8e:3b:03:6c:d8:e0:a9:95:bb:12:1c:
b1:a7:89:a7:dc:77:ab:45:f7:1a:1b:ee:ec:e2:2e:06:0e:80:
28:69:4d:c9:5b:37:7b:63:8e:88:2b:60:32:a0:77:f9:30:c6:
36:76:fa:6b:4c:98:21:0e:a1:ea:5d:1e:72:fe:8e:74:9d:a2:
12:35:3c:5c:7b:8d:21:c8:08:35:dd:6e:eb:e7:ed:a6:83:55:
58:1a:c0:17:03:a2:6b:df:90:64:db:68:b9:a1:b3:1e:47:7a:
9e:93:47:0c:64:09:8b:03:94:9f:49:a8:1a:d9:12:3b:ae:d3:
d6:5e:12:6b:d1:9e:99:d9:a6:c2:a1:b2:f0:cb:34:cf:89:30:
27:8c:87:29:56:81:54:20:61:21:a0:03:ef:e7:5b:ba:93:92:
fe:7e:6f:67:f3:62:f5:47:6d:e3:fc:11:b5:ac:38:e0:c0:66:
46:00:82:d6:38:3c:31:a4:ea:ca:1f:25:17:ce:27:c5:97:a9:
6e:a9:dc:73:87:55:d5:27:43:4f:29:98:7a:75:e2:b1:cb:fd:
09:9a:ea:42:58:6e:35:74:d2:41:38:19:f6:6c:65:6e:0c:24:
32:19:cb:83:c7:72:98:ca:07:bd:a4:36:8a:57:d0:40:01:3a:
a6:70:78:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:41:13 2025 by rpki-client